CVE-2019-7240

Name of the Vulnerable Software and Affected Versions Moo0 System Monitor version 1.83

Description An issue was discovered in the WinRing0x64.sys driver, which exposes a wrmsr instruction via IOCTL 0x9C402088 and does not properly filter the Model Specific Register (MSR). This allows arbitrary MSR writes, leading to Ring-0 code execution and escalation of privileges.

Recommendations For Moo0 System Monitor version 1.83, consider disabling the WinRing0x64.sys driver until a patch is available to prevent arbitrary MSR writes. Restrict access to the IOCTL 0x9C402088 to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.